lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix error

Browse Source
This commit is contained in:
Alexandre SPANGARO 2020-09-18 01:29:18 +02:00
parent 5a6d2b2755
commit 949a16b892
2 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
htdocs/document.php
View File

@ -156,12 +156,13 @@ if (isset($_GET["attachment"])) $attachment = GETPOST("attachment", 'alpha')?tru
if (! empty($conf->global->MAIN_DISABLE_FORCE_SAVEAS)) $attachment=false; if (! empty($conf->global->MAIN_DISABLE_FORCE_SAVEAS)) $attachment=false;
// Define mime type // Define mime type
$type = 'application/octet-stream'; $type = 'application/octet-stream'; // By default
if (GETPOST('type', 'alpha')) $type=GETPOST('type', 'alpha'); if (GETPOST('type', 'alpha')) $type=GETPOST('type', 'alpha');
else $type=dol_mimetype($original_file); else $type=dol_mimetype($original_file);
// Security: Force to octet-stream if file is a dangerous file // Security: Force to octet-stream if file is a dangerous file. For example when it is a .noexe file
if (preg_match('/\.noexe$/i', $original_file)) $type = 'application/octet-stream'; if (!dolIsAllowedForPreview($original_file)) {
$type = 'application/octet-stream';
}
// Security: Delete string ../ into $original_file // Security: Delete string ../ into $original_file
$original_file = str_replace("../", "/", $original_file); $original_file = str_replace("../", "/", $original_file);

2
htdocs/ecm/file_card.php
View File

@ -127,7 +127,7 @@ if ($action == 'update')
$oldlabel=GETPOST('urlfile', 'alpha'); $oldlabel=GETPOST('urlfile', 'alpha');
$newlabel=GETPOST('label', 'alpha'); $newlabel=GETPOST('label', 'alpha');
$shareenabled = dol_sanitizeFileName(GETPOST('label', 'alpha')); $shareenabled = dol_sanitizeFileName(GETPOST('shareenabled', 'alpha'));
//$db->begin(); //$db->begin();